Hi Miro, you can use the Graylog REST API to add/remove/modify rules and pipelines, that's what the Graylog web interface is doing too.
Cheers, Jochen On Thursday, 26 May 2016 10:58:04 UTC+2, Miro K wrote: > > Hi Jochen, > > thanks a lot for your answer. It seems pipelines/rules can do the same. > However, I would have another question - is it possible to modify rules > outside of Graylog GUI, in other words is there documentation available so > I can work with rules from standalone script? > > Thanks again. > > Regards, > Miro > > Dne úterý 24. května 2016 9:00:54 UTC+2 Jochen Schalanda napsal(a): >> >> Hi Miro, >> >> that's currently not possible. >> >> If you're running Graylog 2.0.0 or later, you might want to take a look >> at new message processing pipelines (see >> http://docs.graylog.org/en/2.0/pages/pipelines.html) which can be >> updated without restarting Graylog. >> >> Cheers, >> Jochen >> >> On Monday, 23 May 2016 16:09:01 UTC+2, Miro K wrote: >>> >>> Hi All, >>> >>> is there a way in Graylog 2.0 to reload Drools rule file (e.g. >>> /etc/graylog/server/rules.drl) without restarting graylog process? >>> >>> Thanks, >>> Miro >>> >> -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/8354c732-5ffd-42ae-a43b-1aa6c1b22b71%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
